Privacy Policy

Who we are

Sharny & Julius is a health and fitness business operated by Sharny and Julius Kieser. This policy explains how our internal customer-engagement application, IRIS, collects, uses, stores, and protects information when authorised staff manage our Facebook, Instagram, and YouTube channels.

Information we collect

Depending on the platform and interaction, IRIS may collect:

• Public usernames, display names, profile or channel IDs
• Comments and direct messages sent to our owned social accounts
• Comment IDs, publication times, video IDs, and video titles
• Replies drafted, approved, or published through IRIS
• YouTube channel names and IDs, OAuth access tokens, refresh tokens, and token expiry information for authorised channel connections
• Purchase and support history when a social profile can be matched to an existing customer

How we use information

• Retrieve recent comments from our authorised social channels
• Generate, review, and publish relevant replies
• Route sensitive or uncertain comments to human staff
• Moderate comments when an authorised staff member requests it
• Provide customer support and maintain conversation history
• Protect, troubleshoot, and improve IRIS

YouTube replies are published only to channels connected by an authorised owner or administrator. Automatic publishing requires a separate, explicit setting that can be disabled at any time.

AI-assisted responses

IRIS uses artificial intelligence to classify messages and generate response drafts. Relevant comment or message text and limited conversation context may be sent to our AI processor for this purpose. Sensitive or uncertain interactions are routed to staff for review under our internal rules.

Service providers and data sharing

We use service providers only to operate IRIS:

• Google and YouTube for YouTube channel access and replies
• Meta for Facebook and Instagram comments and messages
• Vercel for application hosting
• Supabase for secured database storage
• Anthropic for AI-assisted text processing

We do not sell or rent personal information. We do not use Google user data for advertising, credit, or surveillance.

Storage, retention, and security

Comment, message, and reply records are typically retained for up to 12 months unless a longer period is required for support, security, or legal obligations. YouTube OAuth credentials are stored only while a channel connection is active and are removed locally when that channel is disconnected from IRIS. Data is transmitted over HTTPS and stored using access-controlled systems. Access is limited to authorised staff and service providers that need it to operate IRIS.

Access, deletion, and revocation

You may request access, correction, or deletion of personal data by following our data deletion instructions. YouTube channel owners can disconnect a channel inside IRIS or revoke Google access from the Google Account connections page. Revoking access stops future API access but does not itself delete previously stored records; use the deletion process for that.

Changes and contact

We may update this policy and will revise the date shown above. For privacy questions or requests, email privacy@sharnyandjulius.com.